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INFORMATION SYSTEMS SECURITY GROUP 


SUMMARY REPORT - FEBRUARY 1974 


HIGHLIGHTS: Fhe-activities ofthe ISSG during February 1974. 


were highlighted by the following: . 


= 


; ro AN 
lz. Progress Reg padeduring- February 
tewerd tire develop t of a Community Limited 
Access Intelligence Register (CLAIRE) to ,’se@! 


saetesfy the DCI's requirement for an automated 

"bigot list" control system. The Intelligence 

Community Staff was briefed on our efforts to 

define user requirements and operational 

concepts for such a system. The Office of 

Joint Computer Support was tasked to make a 

feasibility study, OJCS produced the feasibility 

study which suggested that such a system, 

though administratively difficult to implement, “a 
was both technically feastbte-end economically FrAgsesee, 


Ab. ese Pians to hold a computer security 
seminar for Office of Security personnel and 
selected other Agency employees with computer 2 
security, responsibilities aehteved—sienrficent- COW 7 MVE 
developmental. progress during—Februat., The 
schedule for the seminar was drafted and its 
accreditation by the Director of Training was MAS 


BEEN received. The seminar will be conducted part- 


time, two hours per day, over a four-week 
period. It is expected to be conducted in May 
and November 1974. 


+f. During the month the f8S¢é~-defined Secu- 
rity requirements, fér the Mass Storage System 

being developed under contract by the Office 

of Joint Computer Support: dhe security 

requirements for this computer storage system, Tietefete, 
are highly important. in-that‘With the passage 

of time this storage capability will handle a 

large percentage of the data processed by 

computers in the Agency. 
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ettouy eo TO x 
‘ Following—the- recommendation, @® the 
Inspector Generals made—efter—his: review of THe 


Office f Securitys operations in 1973, 


ae tary the ee ee Se HY the 
be ee Headquarters Roguldtvoider itty’ t roles 


and responsihilities in the comput security 
area of the Office of Security, the Office of 
Communications ,\ computer components, and 
computer users./-Mhese responsibilities 
essentially accent the policy development, 
guidance, and compliance determination roles 

of the @dndaconputér security implementation 
responsibility off*heads of computer components. 
The draft is in the process of informal 
coordination with OJCS. 


IT WAc EP AND 
Se. During-February en—the recommendation of 
the-IS5S6 the Director of Security concurred in 
M&S Directorate plans to disperse computer 
terminals in the Ames Building< Earlier plans 
had suggested te concentrati @® such terminals 
in an Ames Building Data Access Center. “tr 
Support of these-dispersal plans,--the--iSS6-has . 
initiated action to develop Security standards ARE EWS 
‘beveterery for a Data Distribution Grid in Agency buildings 
outside of Headquarters{in SUPPentr OF THIS DISPERSAL PoAse 


& £. During February the ISSG-began H review 44S Bebuy 

of Executive Registry plans to automate selected Asferys ce 
tS operations including*haintenance of its Document 
Index,,~publication of the daily Journal, and 7H 
recording of the minutes of the DCI's morning 
meetings. The principal purpose of the survey 
is to evaluate the risks associated with the 
introduction of sensitive data contained in 
these operations into the OJCS resource sharing 
computer operations. 


ANALYSIS 


The ISSG work load for February was significantly 
greater than January. This is evidenced by the fact that 
despite an above average productivity of completed cases 
during February, pending actions on 1 March were almost 60 
percent more than on 1 February. Except for problem 
resolution type actions, the increase in activity was 
distributed over all types of cases. 
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TRENDS 


‘, Continuation of the February work level through 
March and April is expected. No dramatic increase over the 
new higher February level is foreseen for the next few 
months. Most of the February increase over the January 
activity level is attributed to the convenience to customer 
components of the new ISSG Headquarters location. 


2, Steps initiated in January to transfer ADP support 
activities to,the ISSG clerical staff are beginning to 
bear fruitg@ awr 1 April target date for the completion of 
this transfer will be met. Evidence is developing to 
suggest an increase in our clerical table of organization. 
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MEMORANDUM FOR: Acting Chief, Plans, Programs Branch 


SUBJECT Monthly Activities Summary - February 1974 


Attached is the Monthly Activities Summary for 


February 1974 of the Information Systems Security Group. 


Pes aenene 
Chief, Information Systoms ecurity Group 
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INFORMATION SYSTEMS SECURITY GROUP 
SUMMARY REPORT - FEBRUARY 1974 


HIGHLIGHTS: The activities of the ISSG during February 1974 
were highlighted by the following: 


a. Progress was-made during February 
toward the development of a Community Limited 
Access Intelligence Register (CLAIRE) to 
satisfy the DCI's requirement for an automated 
“bigot list" control System. The Intelligence 
Community Staff was briefed on our efforts to 
define user requiremgnts and operational 
concepts for such a system. The Office of 
Joint Computer Support was tasked to make a 
feasibility Study; OJCS produced the feasibility 
study which suggested that Such a systen, 
though administratively difficult to implement, 
was both technically feasible and economical. 


b. ISSG plans to hold a computer security 
seminar for Office of Security personnel and 
selected other Agency employees with computer 
security responsibilities achieved significant 
developmental progress during February. The 
schedule for the seminar was drafted and its 
accreditation by the Director of Training was 
received. The seminar will be conducted part- 
time, two hours per day, over a four-week 
period. It is expected to be conducted in May 
and November 1974, 


c. During the month the ISSG defined secu- 
rity requirements for the Mass Storage System 
being developed under contract by the Office 
of Joint Computer Support, The security 
requirements for this computer storage system 
are highly important in that with the passage ‘ 
of time this Storage capability will handle a s 
large percentage of the data processed by \ 
computers in the Agency. F 
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d. Following the recommendation of the 
Inspector General made after his review of 
Office of Security operations in 1973, 
during February the ISSG completed drafting 
a Headquarters Regulation defining the roles 
and responsibilities in the computer security 
area of the Office of Security, the Office of 
Communications, computer components, and 
computer users. These responsibilities 
essentially accent the policy development, 
guidance, and compliance determination roles 
of the OS and computer security implementation: 
responsibility of heads of computer components. 
The draft is in the process of informal 
coordination with QJCS. 


e. During February on the recommendation of 
the ISSG the Director of Security concurred in 
M&S Directorate plans to disperse computer 
terminals in the Ames Building; earlier plans 
had suggested the concentration of such terminals 
in an Ames Building Data Access Center. In 
Support of these dispersal plans, the ISSG has 
initiated action to develop security standards 
for a Data Distribution Grid in Ageney buildings 
outside of Headquarters. | e84 


f. During February the IS88G began a review 
of Executive Registry plans to automate selected 
operations including maintenance of its Document 
Index, publication of the daily Journal, and 
recording of the minutes of the $ morning 
meetings. The principal purpose of the survey 
is to evaluate the risks associated with the 
introduction of sensitive data contained in 
these operations into the OJCS resource sharing 
computer operations. 


ANALYSIS | \ 


The ISSG work load for February was significantly 
greater than January. This is evidenced by the fact that 
despite an above average productivity of completed cases 
during February, pending actions on 1 March were almost 60: 
percent more than on 1 February. Except for problem \ 
resolution type actions, the increase in activity was \ 
distributed over all types of cases. : 
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TRENDS 


Continuation of the February work level through 
March and April is expected. No dramatic increase over the 
new higher February level is foreseen for the next few 
months. Most of the February increase over the January 
activity level is attributed to the convenience to customer 
components of the new ISSG Headquarters location, 


activities to the ISs¢ Clerical staff are beginning to 
bear fruit; our 1 April target date for the completion of 
this transfer will be met. Evidence is deve oping to 
Suggest an increase in our Clerical table of organization, 
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